Lompat ke konten Lompat ke sidebar Lompat ke footer

PaloAlto | CLI Command - Part-1

IP Management - CLI Command
admin@PA-VM# delete deviceconfig system type dhc-client
admin@PA-VM# set deviceconfig system type static
admin@PA-VM# set deviceconfig system ip-addres 192.168.189.200 netmask 255.255.255.0

admin@PA-VM# sset device config system default-gateway 192.168.189.2
admin@PA-VM# sset device config system dns-setting server primary 8.8.8.8 secondary 1.1.1.1

Verifikasi:
admin@PA-VM## run show interface management

























>  show system info | match ip-address
# run show system info
# commit description tets-SAVE
>ping host 8.8.8.8
>find command
>find command keyword show
>find command keyword debug

Create User Local
username: admin pass: admin123
>configure
set mgt-config users admin phash admin123

Config IP Management

set deviceconfig system type static
set deviceconfig system ip-address 172.16.10.254 netmask 255.255.255.0 default-gateway 172.16.10.1

show device config
set deviceconfig system ip-address 10.100.100.150
set deviceconfig system netmask 255.255.255.0
set deviceconfig system hostname FW-PA
set deviceconfig system default-gateway 10.100.100.1
set deviceconfig system dns-setting servers primary 8.8.8.8
commit
exit

ADD Verifikasi:
Check OS Palo Version:
>debug swm list

>show routing route
>show routing fib
>test routing fib-lookup ecmp source-ip 10.0.137.254 virtual-router default ip 8.8.8.8

admin@PA-FW-01> show routing fib
admin@PA-FW-01> show routing route
admin@PA-FW-01> show routing route type static

Verifikasi IPSec Tunnel
> show vpn flow name
<tunnel name
> show vpn ipsec-sa tunnel <tunnel name>

Verifikasi Resource
>show system resources follow
>show running resource-monitor

Verifikasi HA
>show high-availability all
>show high-availability interface < ha1 | ha2 | ha3 >

Verifikasi & Check Port INterface
> show system state filter-pretty sys.s1.*
> show system state filter-pretty sys.s1.p3.*
> show system state filter-pretty sys.s1.p3.phy
> show interface ethernet1/3.1012

Check Sesion Check
> show session id 2456388

Check SSL-decrypt certificate
show system setting ssl-decrypt certificate

Verifikasi NAT session
show session all filter nat source

Menampilkan User Login

show user ip-user-mapping all
----------------------------------------------
Mengecek Informasi
> show system info
> show system resources
> show system raid
> show system logdb-quota
> show system disk-space
> show system services

 

 

 

 

 


Posting Komentar untuk "PaloAlto | CLI Command - Part-1"